megadev-ai

Warn

Audited by Socket on Oct 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

Purpose and capabilities are consistent with a game-AI guidance skill, and the pre-execution findings are false positives from prose. The main concern is install trust: the skill asks users to execute an unpinned, third-party Docker image (`ewrogers/megadev:latest`) that is not clearly the official distribution channel for the cited upstream Megadev project, creating high supply-chain risk without evidence of malicious intent.

Confidence: 90%Severity: 78%
Audit Metadata
Analyzed At
Oct 20, 2026, 01:02 AM
Package URL
pkg:socket/skills-sh/ewrogers%2Fmegadev-skills%2Fmegadev-ai%2F@68f934d42d888f423051bcbcb25f0e225ef4dc2b4a0f01257a1d4cb28a63f4e3